Static task
static1
Behavioral task
behavioral1
Sample
7a5f7d2293b62d5192e9ee58042ba417.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a5f7d2293b62d5192e9ee58042ba417.exe
Resource
win10v2004-20231222-en
General
-
Target
7a5f7d2293b62d5192e9ee58042ba417
-
Size
320KB
-
MD5
7a5f7d2293b62d5192e9ee58042ba417
-
SHA1
236f520356ebcadf2f7175afdb0b31e188cb4409
-
SHA256
40ad99217806fb09e9edd914d2558b735a1a166793e7f37392bccb3b6bf75623
-
SHA512
9d6ed159674d0fc555740447e6e548bdf1c8db757e40ef26867cff5e4d400682ffca1bc960b9df28e145a53a2ec718e5b57bc40515041079fa25c44e7370b47a
-
SSDEEP
6144:xCgs94JguFzM+LcN0MaK+uWFjMnsxV0y95EtmVsKPW7:xCdu5VxXKkF4maKu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a5f7d2293b62d5192e9ee58042ba417
Files
-
7a5f7d2293b62d5192e9ee58042ba417.exe windows:4 windows x86 arch:x86
8a877290aa950671ff130f191ed72b8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
SHGetFileInfoA
Sections
CODE Size: 314KB - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE